Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52630693-0f5d-4126-ba07-ad0c0c999660.roa
File: 52630693-0f5d-4126-ba07-ad0c0c999660.roa (raw, json)
Hash identifier: UiOKXFLVnOH+dWiHomBjAy6rH53i/C+irHj1UOCYJJA=
Subject key identifier: 6B:BC:14:62:DA:67:AF:93:66:9F:C8:6D:2F:D7:C5:60:F6:E2:77:78
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2F36588F8A113160676C1D212974735E92D261B6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52630693-0f5d-4126-ba07-ad0c0c999660.roa
Signing time: Fri 07 Aug 2026 05:10:40 +0000
ROA not before: Fri 07 Aug 2026 05:10:40 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:36:58:8f:8a:11:31:60:67:6c:1d:21:29:74:73:5e:92:d2:61:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:40 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=847b425f1e1f20664ebf7f9ed827edbeceef97b43c04a1f9966ef79214f82069, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:21:16:16:39:ca:07:52:63:5d:df:f6:00:8d:
d5:3d:8e:70:85:09:1a:ae:98:3f:c5:93:50:a8:0c:
73:6d:71:6b:76:95:e3:98:fd:97:66:8b:c0:f3:7d:
24:83:65:5f:8e:67:cb:ae:e4:00:3e:c9:2b:d0:bc:
fa:7b:cf:f2:03:85:c5:8f:1a:1d:7e:27:10:b2:69:
11:38:7f:fe:2e:b6:50:22:5d:b0:72:e4:21:1f:b6:
a5:95:df:3b:76:7e:17:60:43:b2:32:8f:6d:82:ef:
2d:09:a9:ac:77:f4:b2:f8:e9:27:3c:99:fd:0c:41:
88:02:e1:0c:9e:32:6e:14:fe:cd:13:c6:4b:d9:1d:
44:e3:a4:24:53:cc:4e:59:ab:73:91:b1:d7:01:21:
47:85:35:c7:b5:57:8f:ef:4d:9f:0d:df:94:35:90:
12:9e:49:00:42:6f:b1:ca:40:a4:26:38:92:9c:53:
63:26:54:45:f5:f4:2c:79:b1:5c:56:ce:ab:be:36:
c8:71:d6:75:0b:b6:f7:46:62:3d:55:10:e3:98:3d:
68:85:6f:4f:4e:fb:97:b6:aa:b2:3f:b9:e2:90:d5:
6b:f1:65:eb:4f:8c:d0:c6:ba:97:e4:31:a1:d9:03:
99:2e:da:53:d7:00:25:f8:9d:95:bd:b6:78:3a:15:
96:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BC:14:62:DA:67:AF:93:66:9F:C8:6D:2F:D7:C5:60:F6:E2:77:78
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52630693-0f5d-4126-ba07-ad0c0c999660.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:e000::/40
Signature Algorithm: sha256WithRSAEncryption
7b:6d:60:b4:fd:1b:2b:4e:5a:36:42:bb:0d:3b:5d:ba:fd:65:
31:0f:6a:d1:2f:eb:f1:d0:33:74:a1:a2:24:53:8f:9d:08:98:
68:05:d5:84:d5:f0:6d:70:40:34:0c:69:39:70:8d:1b:48:98:
1e:8a:6b:1d:47:59:a2:8a:c9:20:f6:8a:10:45:51:30:e3:3e:
73:f5:75:cf:4e:06:b4:70:4b:1c:fe:d7:14:cd:35:56:81:87:
10:ee:22:42:03:86:5f:50:e5:3a:20:57:c1:9b:86:19:6f:aa:
e0:23:4a:c6:be:58:66:2f:71:81:82:85:98:1a:c9:1d:24:71:
0d:53:a1:10:70:8a:c8:a1:ba:c7:9b:4c:6c:8d:9f:05:5f:b1:
30:ae:92:35:a9:4b:74:3b:02:34:3e:52:32:38:93:da:11:89:
84:b4:51:2f:5f:6f:2b:a5:4c:32:13:b7:9b:28:a4:5a:03:35:
cc:11:4b:69:44:e3:90:c4:e5:29:5c:fa:8d:c3:db:61:03:aa:
db:be:5e:94:7d:d9:4c:32:ee:bd:8a:c9:2e:91:cf:b6:8f:5d:
5a:3d:51:f3:9d:55:8d:b1:02:e4:94:77:23:6e:e5:07:bc:1e:
0e:04:f3:7b:54:37:e0:8d:08:fa:14:fa:50:f5:1d:b8:e2:d1:
85:f1:cb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:19 2026 by rpki-client